Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F3E6284B9111EC8B3B7C0ED8A014CE.roa
File: E1F3E6284B9111EC8B3B7C0ED8A014CE.roa (raw, json)
Hash identifier: PF2CSTZgvopeqttqMBGZr+0he1Y0MveDVNXC8C7fqmg=
Subject key identifier: 0B:BE:03:85:BA:50:E3:9F:97:40:37:8D:CA:4C:4C:43:8B:1C:BA:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 121C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F3E6284B9111EC8B3B7C0ED8A014CE.roa
Signing time: Mon 22 Nov 2021 12:44:07 +0000
ROA not before: Mon 22 Nov 2021 12:44:04 +0000
ROA not after: Sat 19 Nov 2022 12:44:04 +0000
asID: 9009
IP address blocks: 154.92.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4636 (0x121c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:44:04 2021 GMT
Not After : Nov 19 12:44:04 2022 GMT
Subject: CN=619b9097-032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:29:89:27:d2:39:93:61:f4:c9:d7:1d:ba:
73:da:fd:3d:8f:97:60:5c:cf:5f:89:40:f9:82:cd:
5a:75:d1:73:d3:3c:86:fb:7d:44:07:8c:36:a1:6e:
2d:8e:fb:b8:37:d7:65:16:47:e4:6a:14:69:66:f3:
9a:76:50:67:7c:ff:b0:d6:8e:2b:ea:fc:76:a2:f5:
54:aa:45:62:fe:1e:ac:c6:d2:96:f1:25:b6:c5:fd:
f3:fe:9f:cb:95:65:08:52:a4:ca:5f:9e:ca:97:3a:
54:44:b4:92:45:5a:5d:47:7c:a9:5c:8e:5f:2c:58:
a6:3b:8f:33:f0:73:cf:46:7b:41:9f:57:6d:7b:ec:
ab:ee:2e:d3:51:67:ee:83:ac:b5:a2:2a:28:d7:64:
7d:ba:4c:eb:fa:10:5e:62:91:82:48:d8:29:dd:26:
a9:56:d7:3c:4d:19:af:01:4e:e3:f0:8d:89:03:79:
75:af:ff:80:94:a4:8c:49:7b:28:98:f2:b4:4e:f5:
ba:7b:b9:2c:7f:ce:84:71:30:19:34:78:79:00:14:
38:b2:57:44:a1:6a:ff:24:76:d4:c5:b0:e7:f2:36:
fb:52:ad:01:4c:f2:0e:db:1c:be:08:78:b6:58:29:
f1:8c:d5:28:c6:d2:ea:72:c0:79:13:fd:78:88:56:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:03:85:BA:50:E3:9F:97:40:37:8D:CA:4C:4C:43:8B:1C:BA:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F3E6284B9111EC8B3B7C0ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.116.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ce:73:81:45:2a:c4:7c:7e:d8:f2:61:19:7a:99:ed:50:0f:
03:5b:38:55:27:cd:0b:43:96:bb:9d:58:da:f9:6a:15:35:30:
40:90:78:04:ee:33:ab:b7:03:cc:e8:bd:34:92:1a:ff:a5:04:
40:24:96:59:eb:0c:84:6a:bd:91:44:6b:16:6a:99:f7:80:0c:
6e:47:90:ef:51:fa:3f:de:cf:ef:2a:17:e3:c8:e2:17:69:f9:
82:6c:1a:b1:b6:4b:92:aa:6c:cc:d9:73:d7:97:08:2d:d8:9d:
1b:27:11:aa:d4:e0:e1:bd:56:eb:50:e8:6f:d3:a7:40:3d:5b:
52:cd:51:f7:6d:ad:28:cf:9c:b9:0c:95:54:07:bc:e1:2a:5b:
be:8d:c3:eb:88:94:13:82:fa:0f:50:d5:56:78:cd:58:df:d3:
30:f7:be:6b:82:50:8e:02:8f:30:e8:20:bb:92:13:ed:0d:d3:
8d:f5:93:b3:7d:10:50:9f:b0:e0:b0:10:ad:cb:b9:3c:58:af:
4d:91:00:b6:c3:14:d5:ca:ae:a9:4b:99:b1:56:c6:6d:b8:15:
3b:b6:80:42:1c:a1:b9:46:3f:7b:f3:35:8a:ca:ab:c0:51:45:
a5:30:fc:d9:43:75:3c:db:68:3f:3a:01:9a:ae:ac:16:3d:22:
a2:85:5c:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMjIxMjQ0MDRaFw0yMjExMTkxMjQ0MDRaMBgxFjAU
BgNVBAMMDTYxOWI5MDk3LTAzMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCp9SmJJ9I5k2H0ydcdunPa/T2Pl2Bcz1+JQPmCzVp10XPTPIb7fUQHjDah
bi2O+7g312UWR+RqFGlm85p2UGd8/7DWjivq/Hai9VSqRWL+HqzG0pbxJbbF/fP+
n8uVZQhSpMpfnsqXOlREtJJFWl1HfKlcjl8sWKY7jzPwc89Ge0GfV2177KvuLtNR
Z+6DrLWiKijXZH26TOv6EF5ikYJI2CndJqlW1zxNGa8BTuPwjYkDeXWv/4CUpIxJ
eyiY8rRO9bp7uSx/zoRxMBk0eHkAFDiyV0Shav8kdtTFsOfyNvtSrQFM8g7bHL4I
eLZYKfGM1SjG0upywHkT/XiIVgejAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUC74D
hbpQ45+XQDeNykxMQ4scukQwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0UxRjNFNjI4NEI5MTExRUM4QjNCN0MwRUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXHQwDQYJKoZIhvcNAQEL
BQADggEBADLOc4FFKsR8ftjyYRl6me1QDwNbOFUnzQtDlrudWNr5ahU1MECQeATu
M6u3A8zovTSSGv+lBEAkllnrDIRqvZFEaxZqmfeADG5HkO9R+j/ez+8qF+PI4hdp
+YJsGrG2S5KqbMzZc9eXCC3YnRsnEarU4OG9VutQ6G/Tp0A9W1LNUfdtrSjPnLkM
lVQHvOEqW76Nw+uIlBOC+g9Q1VZ4zVjf0zD3vmuCUI4CjzDoILuSE+0N0431k7N9
EFCfsOCwEK3LuTxYr02RALbDFNXKrqlLmbFWxm24FTu2gEIcoblGP3vzNYrKq8BR
RaUw/NlDdTzbaD86AZqurBY9IqKFXJE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org